Chief Information Security Officer

Position Summary The Chief Information Security Officer (CISO) owns enterprise security strategy, risk management, and compliance for the FAL Group of companies under Fortive (Accruent, Gordian, and ServiceChannel) all of which are SaaS / data platform companies in the Facilities and Asset Lifecycle space. This is a senior management role reporting directly to Chief Digital and Services Officer at Accruent, with regular visibility and dotted line reporting accountability to the executive teams at all three operating companies as well as security and IT leadership at Fortive. The CISO is accountable for protecting customer data, enabling enterprise sales through compliance readiness, and building a security program that scales with the company’s growth trajectory through operating company specific security strategy and program management aligned with Fortive’s baseline posture and policy, but extended to meet the needs of each individual operating company. This role sits at the intersection of technical security leadership and business strategy. The successful candidate will be equally comfortable running an incident response, presenting risk posture to the executive teams, and walking an enterprise prospect’s security team through the company’s controls during the sales cycle. The successful candidate will also be a seasoned communicator across, upstream to the executive teams and downstream to the business with a clear track record of calibrating communication (written, verbal, and in-person) appropriately to ensure success of the overall security program. Key Responsibilities Security Strategy & Program Leadership * Own and continuously evolve the company’s information security strategy, aligned to business objectives. * Take existing security in excellence practices, communities, executive constructs, and awareness/culture programs and continue to grow them and integrate them as part of the larger security strategy. * Lead and develop a high-performing security organization spanning security operations, vulnerability and threat management, security engineering, governance/risk/compliance (GRC), application security, AI security, and all associated cyber or cyber adjacent incident response. * Set and manage the security budget, including build-vs-buy decisions on tooling and managed services. Ensure the team is budgeted appropriately to meet, interact, grow, develop, and build connections in security across the operating companies, Fortive, and the local security communities they serve. * Establish security architecture standards across cloud infrastructure, AI, application development, and data platforms. * Be the consistent voice for security across the three businesses translating asks from Fortive (parent company), calibrating messaging from Fortive to the three executive teams, owning messaging from the operating company back to Fortive, and insulating the operating companies from business impact wherever possible. * Maintain clear visibility of security posture and strategic programs to the three executive teams, owning cyber considerations for enterprise risk management initiatives, and self-attesting risk assessment initiatives. * Chair and lead the Information Security Council (ISC) at each operating company, raising security awareness, calibrating updates, and driving resolution of critical cyber risk through executive collaboration and partnership. Compliance & Certifications * Own the company’s compliance posture across SOC 2 Type II, ISO 27001, Cyber Essentials Plus, CMMC, ISO 42001, and applicable frameworks (HIPAA, GDPR, CCPA, SOX as relevant to the customer base and internal requirements). * Lead audit cycles end-to-end — evidence collection, auditor relationships, remediation tracking, and timely certification renewal, while streamlining these operations to minimize business impact. * Maintain a current risk register and ensure control gaps are tracked to closure with assigned owners...